0e68209e74f418fb6e61b6908ab962e0_NEAS | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e68209e74f418fb6e61b6908ab962e0_NEAS
Size

73KB
MD5

0e68209e74f418fb6e61b6908ab962e0
SHA1

432d1267a5c179648227f448dfe836795ad16d66
SHA256

fd13f73ed6fb19263c0d62b0a627320ceb793297822237be63b1dac2e7a62a8d
SHA512

817d1681d94a8cfe35901d644a888101e7190e19761cb25adee65e7cd2048fa181e77047208ea16a267f6a9b893652862cef4ba0e0dc515348feb2a933fe1d02
SSDEEP

1536:x2cYcEzIdxUTU6p3LGH6Y804K9D8tcdRS8G11IM3DTqzqEETy:UA7lEyHp4KicdI8dU+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e68209e74f418fb6e61b6908ab962e0_NEAS

Files

0e68209e74f418fb6e61b6908ab962e0_NEAS
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE